STR
Suspicious Transaction Report
Filed when reasonable grounds suspect ML/TF — no monetary threshold.
FINTRAC reporting software · PCMLTFA-aligned
FINTRAC reporting, automated end-to-end.
ComplianceSuite turns Canada's PCMLTFA obligations into a one-button workflow. Detect threshold breaches in real time, aggregate over rolling 24-hour windows, auto-populate STR, LCTR, EFTR, LVCTR, CDR and TPR reports, and submit through the FINTRAC API or FWR batch — with every deadline tracked and every record kept for the full five-year PCMLTFA retention period.
What is FINTRAC?
FINTRAC in one paragraph.
FINTRAC is the Financial Transactions and Reports Analysis Centre of Canada — the country's financial intelligence unit. Under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA), reporting entities including banks, money services businesses (including crypto-asset MSBs), securities dealers, casinos, real-estate brokers, dealers in precious metals and stones, life insurers and mortgage lenders must submit suspicious-transaction reports and threshold-based reports of cash, electronic funds transfers and virtual currency activity. Failures attract administrative monetary penalties of up to CAD 500,000 per violation.
ComplianceSuite covers every FINTRAC report type from one platform — populated from the same case decisions, monitored against the same rules, and preserved in the same PCMLTFA-grade audit trail.
- STR · LCTR · EFTR · LVCTR · CDR · TPR coverage
- FINTRAC API submission and FWR batch upload
- 24-hour aggregation engine for LCTR and LVCTR thresholds
- Per-report-type filing calendar with deadline alerts
- STR narratives drafted from case-management reviewer notes
- Pre-submission FINTRAC schema validation
- 5+ year PCMLTFA-grade record retention
- Acknowledgement & rejection-code tracking
- Optional Canadian data residency
FINTRAC report types
Every FINTRAC report, one platform.
LCTR
Large Cash Transaction Report
Cash receipts of $10,000+ (or 24-hour aggregations) in a single transaction.
EFTR
Electronic Funds Transfer Report
Cross-border EFTs of $10,000+ initiated or received by the reporting entity.
LVCTR
Large Virtual Currency Transaction Report
Virtual currency received in amounts of $10,000+ (24-hour aggregation applies).
CDR
Casino Disbursement Report
Casino disbursements of $10,000+ in a single transaction or 24-hour window.
TPR
Terrorist Property Report
Filed immediately when property is suspected to be owned or controlled by a listed person.
FINTRAC reporting capabilities
Built for every step of a FINTRAC filing.
Every FINTRAC report type
STR, LCTR, EFTR, LVCTR, CDR and TPR — all generated from the same case-management decisions and transaction data.
24-hour aggregation engine
Rolling 24-hour windows across channels and locations automatically aggregate LCTR/LVCTR-qualifying transactions into a single report.
Per-report-type deadlines
STR (as soon as practicable), LCTR/LVCTR (15 days), EFTR (5 working days), TPR (immediate) — tracked with breach alerts.
FINTRAC API & FWR batch
Submit via the FINTRAC API in real time or generate FWR-spec batch files; acknowledgements and rejections feed remediation.
Built for every reporting entity
Banks, MSBs, securities dealers, casinos, real estate, dealers in precious metals and stones, life insurers and crypto-asset MSBs.
PCMLTFA-grade record-keeping
Customer ID records, EFT records, ongoing-monitoring records and submitted reports preserved for 5+ years in the encrypted vault.
How FINTRAC reporting works in ComplianceSuite
From detection to acknowledgement — one workflow.
- 1
Detect
Transaction monitoring rules detect threshold breaches (LCTR $10K, LVCTR $10K, EFTR $10K cross-border) and 24-hour aggregations in real time.
- 2
Investigate
Alerts route into case management with full customer, account and transaction context — reviewers form reasonable grounds for STR or confirm threshold filings.
- 3
Generate
Reports are auto-populated from the case file — STR narratives drafted from reviewer notes, LCTR/EFTR/LVCTR fields pulled from the transaction record.
- 4
Validate
Reports are pre-validated against the FINTRAC XML/JSON spec, with field-level error messages so reviewers fix issues before submission.
- 5
Submit
Reports submitted via FINTRAC API or FWR batch upload; acknowledgements and FINTRAC report numbers stored against the case.
- 6
Remediate
Rejections land in the remediation queue with FINTRAC error codes mapped to plain language; corrected, amended or void reports versioned in the audit log.
FINTRAC administrative monetary penalties reach CAD 500,000 per violation — and missed STRs are the most common citation. A real-time detection & deadline-tracked workflow is the cheapest insurance you can buy.
FAQ
FINTRAC reporting, answered.
What is FINTRAC reporting?
FINTRAC (the Financial Transactions and Reports Analysis Centre of Canada) is Canada's financial intelligence unit. Regulated reporting entities — banks, money services businesses, securities dealers, casinos, real-estate brokers, dealers in precious metals and stones, life insurers, mortgage lenders and others — must submit reports of suspicious transactions, large cash receipts, electronic funds transfers and other prescribed events under the PCMLTFA (Proceeds of Crime (Money Laundering) and Terrorist Financing Act).
Which FINTRAC report types does ComplianceSuite support?
All major FINTRAC report types via the FINTRAC API and FWR (FINTRAC Web Reporting) batch upload: STR (Suspicious Transaction Report), LCTR (Large Cash Transaction Report, $10,000+), EFTR (Electronic Funds Transfer Report, $10,000+ cross-border), LVCTR (Large Virtual Currency Transaction Report, $10,000+), CDR (Casino Disbursement Report) and TPR (Terrorist Property Report). Plus 24-hour aggregation rules and follow-up corrections.
How quickly do FINTRAC reports have to be filed?
Deadlines vary by report type: STRs must be filed as soon as practicable after the suspicion is formed (typically within 3 days), LCTRs and LVCTRs within 15 calendar days of the transaction, EFTRs within 5 working days, and TPRs immediately. ComplianceSuite tracks every deadline on a per-report-type filing calendar with breach alerts so reports never miss FINTRAC's clock.
How does the 24-hour aggregation rule work?
FINTRAC requires that two or more cash transactions (LCTR) or virtual currency transactions (LVCTR) totalling $10,000 or more, conducted by or on behalf of the same person or entity within any 24-hour period, be aggregated and reported as a single transaction. ComplianceSuite's transaction monitoring engine continuously evaluates rolling 24-hour windows across all channels and locations, automatically opening an aggregated report when the threshold is crossed.
Can ComplianceSuite submit FINTRAC reports via API?
Yes. Reports are submitted through the FINTRAC API (preferred for real-time and high-volume filers) or generated as FINTRAC-spec batch files for FWR upload. Acknowledgements and rejection codes flow back into the platform and feed the error-remediation queue.
What's the difference between an STR and the other FINTRAC reports?
An STR (Suspicious Transaction Report) is filed when there are reasonable grounds to suspect a transaction is related to a money-laundering or terrorist-financing offence — regardless of amount. LCTRs, EFTRs and LVCTRs are threshold-based and triggered by transaction size. CDRs cover casino disbursements over $10,000. TPRs apply when an entity holds property suspected of being owned or controlled by a terrorist group. STRs require subjective judgement; the others are objective triggers.
How does ComplianceSuite handle FINTRAC record-keeping obligations?
Beyond report submission, the PCMLTFA requires reporting entities to keep customer identification records, large-cash receipt records, EFT records and ongoing-monitoring records for at least five years. ComplianceSuite's encrypted repository stores every supporting record — KYC documents, transaction details, screening hits, reviewer notes, submitted XML and FINTRAC acknowledgements — with versioning and immutable audit logs.
Is FINTRAC reporting data secure?
Yes. AES-256 encryption at rest with optional customer-managed KMS, TLS 1.3 in transit, strict role-based access with maker-checker controls, and an immutable audit log of every read, write and submission. ComplianceSuite is ISO 27001, ISO 9001 and ISO 22301 certified, GDPR-aligned, and offers Canadian data-residency for FINTRAC workloads.
See ComplianceSuite file a FINTRAC report.
Bring an anonymised transaction extract — we'll simulate the 24-hour aggregation, generate LCTR / EFTR / LVCTR records and walk you through API submission in 30 minutes.